Systems and methods for providing a visualizer for rules of an application firewall

Abstract

The present invention is directed towards systems and methods for generating a representation a plurality of learned rules from a learning engine of an application firewall. The representation may be generated based on a history of URL communications with a web server. A learning engine of an application firewall may determine a plurality of learned rules based on a history of URL communications with a web server. Each of the plurality of learned rules mat be assigned a URL string. A visualizer can categorize a subset of the plurality of learned rules under a first check type of a plurality of check types. The visualizer may further generate a tree representation of URL strings of the subset of learned rules. Each node of the tree corresponds to a segment of the URL strings identified based on a delimiter for the URL strings.

Description

FIELD OF THE DISCLOSURE[0001]The present application generally relates to firewalls. In particular, the present application relates to systems and methods for managing rules of a firewall.BACKGROUND[0002]Corporations are rapidly deploying web-based applications to automate business processes and to facilitate real-time interaction with customers, business partners and employees. Highly vulnerable to malicious hackers, web applications provide an entry point through which sensitive data can be accessed and stolen. Given the vulnerability of web applications, establishing a web application protection is critical for any enterprise that is exposing sensitive data or transaction systems over the Internet.[0003]Firewalls can be an essential component in a corporate entity's network security plan. They represent a security enforcement point that separates a trusted network from another. Firewalls determine which traffic should be allowed and which traffic should be disallowed based on a p...

AI Technical Summary

Benefits of technology

This patent describes a method and system for generating a representation of a plurality of learned rules from a learning engine of an application firewall. The learning engine generates a number of learned rules based on a history of URL communications with a web server. A visualizer categorizes a subset of these learned rules and generates a tree representation of the URL strings associated with them. This representation simplifies the analysis and deployment of the firewall. The technical effects of this patent include improved management of a large number of learned rules and improved efficiency of the firewall.

Problems solved by technology

Many learned rules may be generated from web server traffic and may be challenging for an administrator to manage.

Images